Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/21975138-cf92-36b8-8d76-cc6b2ac602dd.roa
File:                     21975138-cf92-36b8-8d76-cc6b2ac602dd.roa (raw, json)
Hash identifier:          nBchybjlDxIguSkm4UrgrQJuodIENRCwnlApixjIBcI=
Subject key identifier:   58:2D:62:F1:79:C9:37:C4:58:98:15:1A:C7:FF:58:0B:61:FE:73:E1
Certificate issuer:       /CN=7c313e39-91f1-41fc-bc5c-d213a429e287
Certificate serial:       010D0C9F432858497279BBEA0A3405A5D94721C0
Authority key identifier: 7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/21975138-cf92-36b8-8d76-cc6b2ac602dd.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     40401
IP address blocks:        149.137.128.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:bb:ea:0a:34:05:a5:d9:47:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c313e39-91f1-41fc-bc5c-d213a429e287
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=1bf3f91d-0f07-46ff-9373-a6c020389e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:64:3c:5f:54:ae:91:ea:a0:38:e4:ab:97:da:
                    38:1e:68:2c:b8:13:27:ca:18:e0:c0:ce:e1:4d:5e:
                    09:e9:e0:63:29:72:75:df:a9:6f:73:34:0e:92:10:
                    6d:c5:3d:45:ea:a1:79:e8:ca:da:ad:70:31:70:a5:
                    c2:52:13:09:9e:12:77:a6:a1:39:56:2c:9f:00:b9:
                    35:f9:d4:36:8f:4f:ce:ea:68:93:6b:88:f2:55:80:
                    37:8d:7a:29:fa:c3:dd:e6:37:74:d4:b5:80:67:81:
                    7c:ac:6c:6d:fa:62:de:cd:fe:c5:04:ba:5a:7a:f1:
                    dc:b7:a4:09:0e:3b:e1:56:97:49:bf:6f:ca:42:d2:
                    ff:f5:3a:a6:e1:7f:66:0f:d7:e6:ec:ef:28:86:ee:
                    52:13:1c:6c:00:0f:b6:52:c5:28:2e:b5:71:d9:0c:
                    55:78:42:41:f0:43:c0:55:3c:09:1b:66:f0:9b:b4:
                    89:86:4c:0c:b1:40:09:1e:77:52:91:62:40:ea:49:
                    dc:15:85:5e:48:60:6e:13:8b:52:45:30:42:93:39:
                    a7:a6:ad:5a:6d:68:0e:5c:ae:db:e9:8e:b3:54:a9:
                    f0:8e:20:fd:1f:63:ee:b9:c5:eb:19:7a:9c:43:a8:
                    ab:af:2e:58:ad:65:3d:29:20:95:f3:22:68:af:f1:
                    17:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2D:62:F1:79:C9:37:C4:58:98:15:1A:C7:FF:58:0B:61:FE:73:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/21975138-cf92-36b8-8d76-cc6b2ac602dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl

            X509v3 Authority Key Identifier:
                keyid:7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.137.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:a4:b1:37:be:4b:a4:b3:fa:08:99:9e:15:24:82:22:31:a0:
         d6:da:5d:4d:41:d0:5d:1e:30:53:f6:56:85:c6:e1:be:18:c5:
         30:d1:75:03:52:3a:c7:79:bc:5e:5e:e6:c7:fb:70:51:cb:4e:
         a1:7c:07:26:7c:b2:44:25:de:ff:60:4d:0d:ec:9f:e9:e5:ab:
         ce:95:52:ee:4d:82:78:84:48:42:40:0e:fd:d9:26:ac:92:4e:
         69:7e:ea:f7:cc:af:62:d3:88:fc:f4:15:49:29:7e:64:70:c2:
         aa:6f:3b:64:f7:f8:d9:c4:14:ec:7d:e9:86:08:b1:3d:f0:84:
         ec:04:b0:97:28:58:f0:e6:ba:dc:87:0f:54:72:8d:45:5a:73:
         8e:3a:9f:fe:91:ed:92:c2:e8:07:6c:bc:a9:d9:ba:1d:9d:bf:
         8b:76:1f:5d:b3:74:0c:04:5b:69:c0:03:46:6d:cc:2e:f7:84:
         47:b0:d3:43:de:53:0a:40:3f:58:f7:f1:1f:f4:19:a7:3e:0b:
         c2:71:bf:ce:ec:5e:b0:bb:26:4e:c6:2f:1d:41:d7:e1:a7:52:
         b5:67:29:c3:73:cf:ad:7b:51:fe:7a:68:f1:dd:7c:fa:8d:45:
         8e:64:81:8c:bd:a5:66:2f:56:59:f7:cc:2c:1c:c4:4b:79:6b:
         66:38:e6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:37 2025 by rpki-client on console.sobornost.net